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1 . (Currently Amended) A method for authorizing access to a human 
resources database implemented on a computer-readable medium, comprising: 

acquiring a lock after a first query is submitted by a first user, the first query 
relating to a first set of database records: 

detecting, by a computer, whether a second flew query for a second set of 
database records is submitted by a second user, the second set of database records 
associating with the first set of database records, wherein the second user is associated 
with a leyel of an organization : 

dotorm i ning, by examining , after detecting the second query for the second set of 
database records which is submitted by the second user, an employee number . 
associated with the second set of database records submitted in the flew second query 
and an employee number associated with the second user to determine if the second 
user is authorized to access the second set of database record s , whether a usor that 
submitted tho now quory is author i zed to aooooG tho sot of databaoo rooordo ; 

denying the second user from accessing the second set of database records if 
the employee number associating with the second set of database records submitted in 
the second guery matches the employee number associated with the second user: 

determining , if the employee number associating with the second set of database 
records submitted in the second guery differs from the employee number associated 
with the second user, whether the lock is acguired by the first user whothor tho uoor is 
authorized to acqu i re a now l ook on tho sot of database rooordo, whoro i n tho usor is 
authorized i f tho omployoo number asooc i atod w i th tho sot of databaoo rocordc dooo 
not match tho omployoo number of tho usor ; 
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denying the ftew lock to the second user if the lock is acouired by the first user is- 
not author i zod ; 

granting the lock to the second user if the lock is not acouired bv the first user: 
sott i ng tho now l ock or making an attempt to oot tho now look if tho uoor io 
author i zod; and 

informing , after denying to grant the lock to the second user, the second user 
with information relating to the identification of the first user, in accordance with the leyel 
of the second user that tho usor can accoss tho oot of databaso rooords whbn tho usor 
io author i zod or i nfomi i ng tho user that tho ucor cannot aocoGO tho sot of database 
rocordo whon tho uoor i s not author i zod , 

2-4. (Cancelled). 

5. (Currently Amended)) The method as recited in claim 1 further comprisihg 
permitting access to the second set of database records if the second user is 
authorized. 

6. (Currently Amended) The method as recited in claim ^ & further 
comprising releasing the wew lock after the first user has checked out from the first set 
of database records. 
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7. (Currently Amended) The method as recited in claim 1 wherein 
determining whether the second user is authorized further includes determining whether 
the second user has write authorization for the set of database records. 

8. (Currently Amended) The method as recited in claim 1 wherein 
determining whether the second user is authorized further includes determining whether 
the second user has a maximum database access authorization. 

- 9. (Cancelled). 

10. (Currently Amended) The method as recited in claim 1 wherein 
determining whether the second user is authorized includes determining whether the 
second user is organizationally authorized. 

1 1 . (Currently Amended) The method as recited in claim 1 wherein 
determining whether the second user is authorized includes determining includes 
whether the second user is currently authorized. 

12. (Currently Amended) A computer-readable medium storing program 
instructions for performing a method of authorizing access to a human resources 
database, the method comprising: 

acquiring a lock after a first query is submitted by a first user, the first query 
relating to a first set of database records: 
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detecting , by a computer, whether a second eew query for a second set of 
database records which is submitted by a second user the second set of database 
records associating with the first set of database records, wherein the second user is 
associated with a leyel of an organization : 

dotormin i ng, by examining , after detecting the second guen/ for the second set of 
database records is submitted by the second user, an employee number associated 
with the second set of database records submitted in the ^ew second query and an 
employee number associated with the second user to determine if the second user is 
authorized to access the second set of database records , whothor a uoor that submittod 
tho now query is author i zed to aooooo tho oot of databaoo rocordo ; 

denying the second user from accessing the second set of database records if 
the employee number associatino with the second set of database records submitted in 
the second guery matches the employee number associated with the second user: 

determining , if the employee number associating with the second set of database 
records submitted in the second query differs from the employee number associated 
with the second user, whether the lock is acguired by the first user whothor tho usor i o 
authorizod to acqu i re a now look on tho oot of database rooords, whoro i n tho uoor is 
author i zed if tho omployoo number aQOOo i atod w i th tho oot of databaoo rocordo dooo 
not match the e mp l oyoo numb e r of tho usor ; 

denying the «ew lock to the second user if the lock is acguired by the first user is- 
not author i zod ; 

granting the lock to the second user if the lock is not acguired by the first user: 
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sotting tho now l ook or making an attonnpt to sot the now look if the uoor io 
Quthor i zod; and 

informing , after denying to grant the lock to the second user, the second user 
with information relating to the identification of the first user, in accordance with the level 
of the second user that tho usor can aoooss tho sot of databaso rocordQ whon th e us e r 
io authorized or i nform i ng tho uoor that tho uoor cannot aooooo tho oot of databaso 
roGords whon tho uoor is not author i zed , 

13-15. (Cancelled). 

- 16. (Currently Amended) The computer-readable medium as recited in claim 
12 further comprising permitting access to the second set of database records if the 
second user is authorized. 

17. (Currently Amended) The computer-readable medium as recited in claim 
16 further comprising releasing the new lock after the first user has checked out from 
the first set of database records. 

18.. (Currently Amended) The computer-readable medium as recited in claim 
12 wherein determining whether the second user is authorized includes determining 
whether the second user has write authorization for the second set of database records. 
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19. (Currently Amended) The computer-readable medium as recited in claim 
12 wherein determining whether the second user is authorized includes determining 
whether the second user has a maximum database access authorization. 

20. (Currently Amended) The computer-readable medium as recited in claim 
1 2 wherein the second user has a conflict of interest when the second set of database 
records personally pertain to the second user. 

21 . (Currently Amended) The computer-readable medium as recited in claim 
12 wherein determining whether the second user is authorized includes detemriining 
whether the second user is organizationally authorized. 

22. (Currently Amended) The computer-readable medium as recited in claim 
12 wherein determining whether the second user is authorized includes determining 
whether the second user is currently authorized. 

23 - 24. (Cancelled). 

25. (Currently Amended) A database system implemented on a computer- 
readable medium authorizing access to a human resources database, comprising: 
a processor; 

a memory storing instructions executable by the processor, the instructions 
comprising: 
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means for acquiring a lock after a first auerv is submitted bv a first 
user, the first query relating to a first set of database records: 

means for detecting, by a computer, wliether a second mw query 
for a second set of database records is submitted bv a second user, the 
second set of database records associating with the first set of database 
records, wherein the second user is associated with a level of an 
organization 

means for dotormin i ng, by examining , after detecting the second 
guerv for the second set of database records which is submitted bv the 
second user, an employee number associated with the second set of 
database records submitted in the f^ew second query and an employee 
number associated with the second user to determine If the second user is 
authorized to access the second set of database record s , wh e ther a user 
that subm i tted tho n e w qu e ry i s author i zed to acooss tho sot of databaoo 
records ; 

means for denying the second user from accessing the second set 
of database records if the employee number associating with the second 
set of database records submitted in the second guerv matches the 
employee number associated with the second user: 

means for determining , if the employee number associatino with the 
second set of database records submitted in the second guerv differs from the 
employee number associated with the second user, whether the lock is acguired 
by the first user whothor tho usor i s authorized to aoou i ro a now look on tho sot of 
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database rooords, whoro i n the uoor i s author i zod i f tho omployoo number 
associatod with tho sot of database records doos not match the omployoo 
number of the user ; 

means for denying the f^ew lock to the second user if the lock is acquired 
by the first user is not authorizod ; 

means for granting the lock to the second user if the lock is not acquired 
by the first user: 

moans for sotting tho now l ook or mak i ng an attempt to sot tho now l ook i f 
tho user is authorizod; and 

means for informing , after denying to grant the lock to the second user, . 
the second user with information relating to the identification of the first user, in 
accordance with the leyel of the second user that tho usor can aoooss tho sot of 
database records when th e us e r is authorized or inform i ng the usor that tho usor 
cannot acc e ss tho sot of databaso rooords wh e n tho us e r is not author i zod . 

26-28. (Cancelled). 

29. (Currently Amended) The database system as recited in claim 25 further 
comprising means for permitting access to the second set of database records if the 
second user is authorized. 



30 - 34. (Cancelled). 
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35. . (Currently Amended) A method for making a preliminary determination of 
whether a second user has authorization to access a second set of database records 
implemented on a computer-readable medium, comprising: 

acquiring a lock after a first query is submitted by a first user, the first query 
relating to a first set of database records: 

detecting, by a computer, whether a second fiew query for a the second set of 
database records is submitted by a second user, the second set of database records 
associating with the first set of database records, wherein the second user is associated 
with a leyel of an organization : 

dotorm i ning, by examinin g, after detecting the second query for the second set of 
database records which is submitted by the second user, an employee number 
associated with the second set of database records submitted in the wew second query 
and an employee number associated with the second user to determine if the second 
user is authorized to access the second set of database record s , whether a uoor that 
submitted tho now qu e ry is authorized to access tho sot of database records ; 

denying the second user from accessing the second set of database records if 
the employee number associating with the second set of database records submitted in 
the second ouery matches the employee number associated with the second user: 

determining , if the employee number associating with the second set of database 
records submitted in the second guerv differs from the employee number associated 
with the second user, whether the lock is acguired by the first user, and whether the 
user is authorized to access the second set of database records acqu i re a now look for 
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tho sot of databaoo rooordo based on tho omp l oyoo numbor of tho uoor and at least one 
of (a) write authorization and (b) a lack of conflict of interest; 

denying the fiew lock to the second user if the lock is acquired bv the first user Is- 
not author i zed ; 

granting the lock to the second user if the lock is not acquired bv the first user: 
sott i ng tho now l ook or making an attempt to oot tho now l ook if tho uoor io 
authorized; and 

informin q. after denying to grant the lock to the second user, the second user 
with infomnation relating to the identification of the first user in accordance with the level 
of the second user that the user can access the oot of database records when the user 
i s authorized or i nfomr i ing the user that tho user cannot access tho set of databas e 
records wh e n the user i s net author i zed . 

36. (Currently Amended) The method of claim 35, further comprising: 
setting the new lock or making an attempt to set the «ew lock if the second user 

is authorized. 

37. (Currently Amended) The method of claim 35, wherein detemiining 
whether the user is authorized to access the second set of database records acqu i re 
the new lock further includes detemiining whether the second user has a maximum 
database access authorization. 
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38. (Currently Amended) The method of claim 35, wherein determining 
whether the second user has a conflict of interest includes determining whether the 
second set of database records personally pertain to the second user. 

39. (Currently Amended) The method of claim 35, further comprising: 
determining, when the employee number associated with the set of database 

records matches the employee number of the second user, whether the second set of 
database records comprise critical or non-critical information; and 

wherein the second user is not authorized when the second set of database 
records comprise critical infomnation. 

40. (Currently Amended) The method of claim 39, wherein the critical 
information comprises pay records of the second user. 

41 . (Currently Amended) A method for determining whether a user has 
authorization to access a set of database records, comprising: 

acquiring a lock after a first query is submitted by a first user, the first query 
relating to a first set of database records: 

detecting, by a computer, whether a second bow query for a second set of 
database records which is submitted by a second user the second set of database 
records associating with the first set of database records, wherein the second user is 
associated with a level of an organization : 
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dotonnin i ng, by examining , after detecting the second query for the second set of 
database records is submitted by the second user, an employee number associated 
with the second set of database records submitted in the f>ew second query and an 
employee number associated with the second user to determine if the second user is 
authorized to access the second set of database record s , whothor a uoor that cubmittod 
tho now query i o authorized to accoss tho oot of database records ; 

denying the second user from accessing the second set of database records if 
the employee number associating with the second set of database records submitted in 
the second guery matches the employee number associated with the second user: 

determining , if the employee number associating with the second set of database 
records submitted in the second guery differs from the employee number associated 
with the second user, whether the lock is acguired by the first user, and whether the 
second user is authorized to acquire the a n e w lock for the second set of database 
records based on the employee number of the second user and, when the employee 
number associated with the second set of database records matches an the identifier of 
the second user, whether the second set of database records comprise critical or 
non-critical information; 

denying the mw lock to the second user if the lock is acguired by the first user is- 
not author i zed ; 

granting the lock to the second user if the lock is not acquired by the first user; 
Getting tho new l ock or mak i ng an attempt to sot tho n e w l ook if tho us e r is 
authorized; and 
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informing , after denying to grant the lock to the second user, the second user 
with information relating to the identification of the first user in accordance with the level 
of the second user that tho uoor can acooGO tho oot of databaoo rooordo whon tho uoor 
i o authorized or i nforming tho UGor that tho usor cannot access tho sot of databas e 
records whon tho uoor io not author i zed . 

42. (Currently Amended) The method of claim 41 , wherein the second user is 
not authorized when the second set of database records comprise critical information. 

43. (Currently Amended) The method of claim 42, wherein the critical 
information comprises pay records of the second user. 

44. (Currently Amended) A method for authorizing access to a human 
resources database, comprising: 

acguiring a lock after a first guerv is submitted by a first user, the first guerv 
relating to a first set of database records: 

detecting, by a computer, whether a second new query for a second set of 
database records is submitted by a second user, the second set of database records 
associating with the first set of database records, wherein the second user is associated 
with a level of an organization : 

dotormining, by examining , after detecting the second guerv for the second set of 
database records which is submitted by the second user, an employee number 
associated with the second set of database records submitted in the new second query 



-14- 



Application No. 10/808,671 
Attorney Docket No. 07781.0319-00 

and an employee number associated with the second user to determine if the second 
user is authorized to access the second set of database records , whothor a UGor that 
Gubmittod tho now query is author i zed to aocoso tho sot of databaoo rooordo ; 

denying the second user from accessing the second set of database records if 
the employee number associating with the second set of database records submitted in 
the second guery matches the employee number associated with the second user: 

determining , if the employee number associating with the second set of database 
records submitted in the second ouery differs from the employee number associated 
with the second user, whether the lock is acguired by the first user and w hether the 
second user is authorized to access the second set of database records aoquiro a now 
leek on the second set of database records, the second user being authorized if the 
second user does not haye a conflict of interest with respect to the second set of 
database records, wherein the second user does not haye a conflict of interest when the 
employee number associated with the second set of database records does not match 
the employee number associated with the second user; 

denying the new lock to the second user if the lock is acguired by the first user is- 
not authorized ; 

granting the lock to the second user if the lock is not acguired by the first user: 
Getting tho now l ock or mak i ng an attempt to sot tho now l ook i f th e user i s 
authoriz e d; and 

informing , after denying to grant the lock to the second user, the second user 
with infomriation relating to the identification of the first user, in accordance with the leyel 
of the second user that tho uGor can qooogg tho cot of databaoo rooordo when tho uGor 
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io authorizod or i nfomn i ng tho uoor that tho usor cannot accooG the oot of database 
rocordc whon tho uoor i o not authorized . 

45. (Currently Amended) A method for authorizing access to a human 
resources database, comprising: 

acquiring a lock after a first query is submitted bv a first user, the first query 
relating to a first set of database records: 

detecting, by a computer, whether a second «ew query for a second set of 
database records is submitted by a second user, the second set of database records 
associating with the first set of database records, wherein the second user is associated 
with a level of an organization : 

detonnining, by examinin g, after detecting the second guery for the second set of 
database records is submitted by the second user, an employee number associated 
with the second set of database records submitted in the «ew second query and an 
employee number associated with the second user to determine if the second user is 
authorized to access the second set of database record s , wh e th e r a us e r that subm i tted 
tho now query io authorized to aoooos the sot of database records ; 

denying the second user from accessing the second set of database records if 
the employee number associating with the second set of database records submitted in 
the second quen/ matches the employee number associated with the second user: 

determining , if the employee number associating with the second set of database 
records submitted in the second guery differs from the employee number associated 
with the second user, whether the lock is acguired by the first user, whether a the. 

-16- 



Application No. 10/808,671 
Attorney Docket No. 07781 .031 9-00 

second user that submitted the new query is authorized to access the second set of 
database records aoqu i ro a now l ook on the sot of databaoo rooordo , wherein the 
second user is authorized if the second user does not have a conflict of interest when 
the second set of database records do not personally pertain to the second user; 
denying the new lock if the second user is not authorized; 
Granting the lock to the second user if the lock is not acquired bv the first user: 
sott i ng the now look or mak i ng an attempt to sot tho now l ook if tho uoor is 
authorized; and 

informing , after denvino to orant the lock to the second user, the second user 
with information relating to the identification of the first user, in accordance with the level 
of the second user that tho uoor can aoooGo tho oot of databaoo rooordc whon tho uoor 
i o authorized or i nform i ng tho uoor that tho uoor cannot aooooo tho cot of databaoo 
roGords wh e n th e user i s not author i zed . 
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